Test ID:	10348
Category:	Web application abuses
Title:	ows-bin
Summary:	Oracle's Web Listener (a component of the Oracle Application Server),; is installed and can be used by a remote attacker to run arbitrary commands on the web server.
Description:	Summary: Oracle's Web Listener (a component of the Oracle Application Server), is installed and can be used by a remote attacker to run arbitrary commands on the web server. Solution: If 'ows-bin' is the default CGI directory used by the Oracle Application Server Manager, then remove the ows-bin virtual directory or point it to a more benign directory. If 'ows-bin' is not the default then verify that there are no batch files in this directory. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	BugTraq ID: 1053 Common Vulnerability Exposure (CVE) ID: CVE-2000-0169 http://www.securityfocus.com/bid/1053 http://archives.neohapsis.com/archives/ntbugtraq/2000-q1/0211.html XForce ISS Database: oracle-weblistener-remote-attack
Copyright	Copyright (C) 2000 Noam Rathaus

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.